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Abstract. In computer science, various logical languages are defined to 
analyze properties of systems. One way to pinpoint the essential difi'er- 
ences between those logics is to compare their expressivity in terms of 
distinguishing power and expressive power. In this paper, we study those 
two concepts by regarding the latter notion as the former lifted to classes 
of models. We show some general results on lifting an invariance relation 
on models to one on classes of models, such that when the former corre- 
sponds to the distinguishing power of a logic, the latter corresponds to its 
expressive power, given certain compactness requirements. In particular, 
we introduce the notion of class bisimulation to capture the expressive 
power of modal logics. We demonstrate the application of our results by 
revisiting modal definability with our new insights. 



1 Introduction 

Logical languages are formal languages that can be used to express properties of 
mathematical structures: models. The standard notion for comparing how much 
logical languages can say about a certain class of models, arc distinguishing 
power (can a language tell the difference between two models?), expressive power 
(which classes of models can be defined by a formula of the language?). 

The well-known hierarchy is as follows: distinguishing power is a coarser 
criterion for comparing languages than expressive power, e.g. if two languages are 
equally distinguishing, they are not necessarily equally expressive, but if they are 
equally expressive, they are equally distinguishing. We can relate the two notions 
by observing that expressive power can be seen in terms of distinguishing power 
lifted to classes of models: a class of models is definable in a logic iff the logic 
can distinguish that class and its complement. 

An important concept closely related to the distinguishing power in this 
context is structural equivalence on models, e.g. isomorphism and bisimulation. 
Classic results showed that certain logics can only distinguish models up to 
certain structural equivalences, thus giving upper bounds of the distinguishing 
power of the logics. In that case, the structural equivalence is an invariance 
relation for such logic. Under some restrictions, a structural equivalence may 
capture the distinguishing power of the logic precisely, such that two models can 
be distinguished by the logic iff they are equivalent according to the structural 
equivalence. 
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One goal of the paper is to sharpen the understanding of the difference be- 
tween expressive and distinguishing power. We observe that expressive power 
can be seen as distinguishing power generahzed to classes of models. This gives 
rise to the question whether a corresponding notion of invariance exists. In search 
of such notion, we generalize structural equivalence on models to structural re- 
lations on classes of models, and use that for a notion of class invariance for a 
logic that gives information about its expressive power. 

In Section 2 we study the expressive power as generalized distinguishing 
power in detail. We give some general invariance results in Section 3 on lifting 
structural equivalence on models to a relation on classes of models. We show 
that the two natural notions of class invariance correspond precisely to the class- 
equivalence and class-indistinguishability relations respectively, when restricted 
to compact classes. This result is closely related to the use of compactness in 
existing Lindstrom-type characterization theorems. In Section 4 we study class- 
bisimulation in the light of existing results on bisimulation. 

We characterize modal definability by our notion of class-bisimilarity. 

Related work. Comparing expressive power of different logics has always been a 
central issue in the study of logics. In the context of computer science, the work 
on comparing LTL and CTL is a notable example (a.o. [7, 3, 5, 10]), besides fun- 
damental characterization theorems that capture the expressive power of modal 
logic and modal mu-calculus [12,9]. More recent results in terms of Lindstrom- 
type characterization theorems also helped us sharpen our understanding on 
various fragments of FOL which are useful in computer science [13,4, 11]. More 
comprehensive discussions on the expressivity of modal logics can be found in [8] . 

2 Preliminaries 

In this section, wc study the gap between distinguishing power and expressive 
power. When comparing two logics Li and L2, we assume a given class of models 
M on which Li and L2 are interpreted; we use 'classes of models' usually for 
'subclasses oi M\ All logics in this paper are assumed to be 2- valued. 

2.1 Expressive Power as a Generalized Distinguishing Power 

As we mentioned in the introduction, the distinguishing power of a logic is its 
power to tell two models apart. Wc call a formula ip in a language L a separating 
formula for models Mi and M2 (Mi jj^ M2), if either Mi N ip and M2 ^ (p, or 
vice versa. We write Mi \\l M2 if there exists ip G L with Mi jji^ M2. 
We say L2 is at least as distinguishing as Li {Li =4d L2) iff 

VAfi,A/2 e M : Ml A/2 implies Mi M2. 

For expressive power, we say L2 is at least as expressive (in defining properties 
i.e. classes of models) as logic Li on M. {Li^^L2) iff 

\fipi e Li3ip2 G L2VA/ £M:M\=^ipi iffM ^ ^2, 
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It is not hard to prove that Li L2 hiiphes Li L2, but the converse 
may fail, as the following table, comparing several modal logics, shows. 



expr 
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Ll L2 


Ll ~e L2 


Ll L2 


Ll : PDL 
L2 : ML- 
A4 : all Knpke models 
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Ll L2 


Ll ■ LTL 
L2 : CTL 
A4 : all Knpke models 


Ll : ML 
L2 : ML^ 
A4 : all Knpke models 


_L 


Ll L2 


Ll : PDL 
L2 : ML~ 
A4 : image-finite models 


Ll : ML 
L2 : MLoo 
A4 : image-finite models 


any Li = L2 
on any M 



Fig. 1. Some modal logics compared with respect to expressive and distinguishing 
power. The symbols ^di~d f'lid stand for strictly less distinguishing, equally dis- 
tinguishing and incomparable in distinguishing power respectively; -<^,k.^ and are 
the respective counterparts for expressive power. In the table, ML is basic modal logic; 
ML~ is basic modal logic with a backward modality; MLoo is basic modal logic with 
infinite (arbitrarily large) conjunctions; PDL is propositional dynamic logic; LTL is 
Linear time temporal logic and CTL is computation tree logic. Image-finite Kripke 
models are those in which from each world only finitely many worlds are accessible. 
All results are standard or easy to see; for LTL vs CTL cf. [7]. 

We now have a closer look at the notions of expressive and distinguishing 
power. The key observation is to view expressive power as distinguishing power 
on classes of models, with standard distinguishing power the special case for the 
restriction to singleton classes. 

Like in the case for distinguishing power, we call a formula (/? in a language 
a separating formula for classes of models Ci,C2 C J\A (Ci C2), if either 

Ci(Z{MeM \ M N if} and C2 <^ {M e M \ M \/ if} or vice versa. 

We write Ci ||l C2 if there exists ip e L with Ci ||^ €2- Note that {Afi} \\^ 
{M2} <^ Ml \\ip M2 and that the existence of a separating formula for two 
classes of models implies that they are disjoint. 

We can gradually fill up the gap between distinguishing power and expressive 
power, with a hierarchy of notions capturing the ability of languages to distin- 
guish pairs of classes 0/ models, where those classes have cardinality up to k: L2 
is at least as n- distinguishing as Li{Li L2) iff L2 can distinguish the same 
classes of size up to K, BjS Ll. Formally, Li ^'^ L2 ^ 

VCi,C2 M. of cardinality less than or equal to k : C\ C2 ^ C\ \\l2 ^2- 
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We say L2 is at least as class- distinguishing as Li{Li L2) if L2 can distinguish 
the same classes up to arbitrary size as Li. 

Now it is straightforward to see that K-distinguishability coincides with stan- 
dard distinguishability for k = 1. Standard expressivity coincides with class- 
distinguishability or |Al|-distinguishability if Ai is not a proper class as Theo- 
rem 1 shows: 

Theorem 1 For logical languages Li,L2 that are interpretable on a class of 
models Ai , the following are equivalent: 

1. L2 is at least as class- distinguishing as Li (Li ^2)- 

2. L2 is at least as expressive as Li (Li L2). 

The essence of the proof of Theorem 1 consists of the fact that a subclass 
C of is definable by L iff there exists a separating formula in L for C and 
C = M\C. (Cf. Appendix A.) 

Since =4d is for n ~ I, wc have: 

Corollary 2 Li L2 implies Li =4^ ^2- 

From the above results we know that expressive power can be approximated 
by distinguishing power for increasing sizes of classes of models. However, the 
hierarchy may collapse due to the presence in the logical languages of certain 
connectives (which correspond to set-theoretic operations), as the following re- 
sult shows: 

Theorem 3 (Collapsing theorem) // L2 contains negation and K-ary dis- 
junction and conjunction, then Li =4d ^2 *i7 ^1=^5-^2- 

Proof. Right to left is obvious, we prove from left to right. Assume Li L2, and 
suppose Ci,C2 C M are of cardinality < k, and Ci C2. Then, in particular, 
for each AIi G Ci and M2 £ €2- Ah ^h- But because Li L2, then also 
Ml ||l2 M2. For each pair Mi G Ci and M2 G C2, pick a formula -0(Mi, M2) G L2 
such that Ml \\-^{Mi,M2) -M2. Without loss of generality, because L2 contains 
negation, we can take the tp{Mi,M2) such that they are true on the Mi(g Ci), 
and false on the M2(G C2). But then for each Mi G Ci: AAfaGC, "0(^1, M2) G L2 
separates {Mi} and C2, and hence: VmigCi AM2GC2 0(-Mi,M2) G L2 separates 
Ci and C2. So: Ci \\l2 C2. 

Hence: Li L2 implies Li=^2-^2- □ 

From the above theorem, it is straightforward to see that distinguishing power 
and expressive power coincide if we restrict to finite model classes and a logic 
with the usual connectives: 

Corollary 4 // L2 contains V, A and -1, then for each k < Hq, Li =<;^ L2 
Li^dL2 ■ 
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2.2 Induced Equivalence Relation 

In the previous subsection, we viewed distinguishing power and expressive power 
in terms of the abihties of the languages to separate model classes. Now we take 
a dual perspective, namely the equivalence induced by the limit of distinguishing 
power over classes, since this will lead us to the notion of invariance. 

Let =L be the induced equivalence relation of language L such that for all 
Mi,M2 G M: Ml =L M2 iff Mi and M2 satisfy exactly the same set of L- 
formulas. Note that Mi \\l M2 iff Mi M2, so we can easily prove: 

Theorem 5 Li ^2 iff =L2^=Li • 

The theorem states: logical languages that induce a finer equivalence rela- 
tion, have stronger distinguishing power and vice versa. We thus can compare 
distinguishing power of two logics by comparing their induced equivalence rela- 
tions. As we mentioned in the introduction, given a logic, we would like to find a 
structural characterizations of its induced equivalence, as a structural measure of 
its distinguishing power. We call an equivalence relation ~ on a class of models 
A4 an invariance for L on if for all Mi , M2 € A4 : 

Ml ^ M2 => Ml =L M2. 

Various structural invariance relations for logics are known, like bisimula- 
tion for modal logic and isomorphism for first-order logic. Sometimes we have a 
precise structural characterization of the induced equivalence, e.g. two pointed 
Kripke models are bisimilar iff they satisfy the same set of infinitary modal for- 
mulas [1]. So bisimulation coincides with the induced equivalence relation for 
MLoo- However, for many temporal logics including ^-calculus L^^ bisimulation 
is an invariance relation but not the induced equivalence relation: it is possible 
to find two non-bisimilar models that can not be told apart by [2]. It fol- 
lows that MLao is strictly more distinguishing than L^. On the other hand, 
and MLoo are not comparable in terms of expressive power since can define 
well-foundedness while MLqo can not, cf. [2]. 

We now investigate whether we can define a relation on models that similarly 
corresponds to expressive power. A promising candidate is class equivalence: 

Definition 6 Define the equivalence =£ induced by L on classes of models by 
Ci =£ C2 (V<y9 e L,Ci N (fi iff C2 N cp), where Ci,C2 C M and C \= ip iff 
MM €C,M^ if. 

However, this natural notion of equivalence notion does not match class- 
indistinguishability, as the following Proposition shows: 

Proposition 7 For all classes of models C\,C2 C A^.- Ci |[l C2 ^ Ci ^£ C2, hut 

the converse does not hold in general. 

Proof. => is trivial. 

To see that the converse does not hold, we may take some formula G L 
that is contingent on M (i.e. can be satisfiable but not valid on M). Now let 
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Ci be the class of models defined by tpi and let C2 he M. Then Ci C C2, so they 
are not distinguishable (distinguishability implies disjointness) . But obviously 
Ci ^£ C2, because Ci N but not C2 N "0- So, the right-to-lcft-implication does 
not hold. □ 

The relation that corresponds to class-indistinguishability is the following: 

Definition 8 For classes of models €1,62 C we define the symmetric rela- 
tion of L by: 

Ci XL C2 ^ V(y5 e L : (Ci N ^ C2 -(ys) A (C2 N 95 ^ Ci ]^ ^ip) 

It is easy to see that Ci C2 Ci \\l C2 (but note that is not an 
equivalence relation, as it docs not satisfy transitivity in general). 
Thus we have: 

Theorem 9 Li 4^ L2 <^xl2Cxi,^ . 
3 Class Invariance 

In this section, we propose two ways to lift the structural equivalence to class 
similarity relations which can be used as candidates for the structural charac- 
terization of =£ and x^. We show in Theorem 12 that they are indeed class 
invariance relations if they arc based on model invariance relations for the same 
language L. 

Definition 10 Given an equivalence relation ~ on models, we can lift ^ to a 
relation on classes of models in the following two ways: 

- Ci^^C2 iff: 

• for each Mi G Ci there is M2 £ C2 such that Mi ~ M2 ■ 

• for each M2 S C2 there is Mi £ Ci such that Mi ~ M2 ■ 

— Ci~^C2 iff there are two models Mi £ Ci and M2 £ C2 such that AIi ^ A/2. 

It is easy to see that and are indeed generalizations of ^; A/ ^ <^ 
{M}^%{N} ^ {M}^<i{N}. 

Remark 11 The above definitions give rise to some intuitive class comparison 
games that naturally lift the model comparison game for ^. For example, con- 
sidering define G^(Ci,C2) for classes Ci,C2 of models as follows: Verifier 
chooses two models M, N from Ci and C2 respectively. Then he plays the model 
comparison game MC {M, N) with Spoiler, if MC {M, N) is defined. Verifier 
wins iff he wins in MC {M,N). Depending on the type of MC {M, N) (e.g. 
n-round, unbounded, infinitary) and the the results on MC {M, N) with respect 
to certain language L, we may characterize with L' being a fragment of L, 
by the Verifier's winning strategies of the game G^(Ci,C2). (Space limitations 
prevent us from elaborating further on the game perspective in this paper.) 
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We can show that if ~ is an invariance for L then the Hfted relations and 
are invariance relations for the class equivalence or class indistinguishability 
respectively. 

Theorem 12 VM, N : M N ^ M =l N implies: 
1. VCi,C2 : Ci~^C2 ^ Ci =£ C2 

Proof. (1) is obvious, we only prove (2). If Ci~|;C2, then there are M G Ci, N G 
C2 such that M ^ N. For any formula (j) such that Ci 1= cj), we know M N 0. Since 
M ^ N implies =l N, we have TV N 0. Therefore C2 <^ {M \ M )^ (j)}. □ 

As we have seen in the examples, VA/, N : M ^ N <^ M =^ does 
not imply VCi,C2 : Ci~^C2 <^ Ci =£ C2 in general, otherwise there would be 
no difference between distinguishing power and expressive power. Now let 
be a logical language with arbitrarily large (up to class-size) conjunctions and 
disjunctions. We then have the following straightforward results: 

Theorem 13 VA/, N : M ^ N <^ M =£== N implies: 

1. VCi, C2 ; Ci~^C2 <J=^ Ci =£oc C2 

2. VCi,C2 : Ci~|C2 ^ Ci x^I C2 

Proof. Wc again only show (2), and due to Theorem 12 we only need to show 
Suppose Ci >i£^ C2. Towards contradiction, suppose there are no models 
M € Ci, N € C2 such that M - N. Then since VM, N : M ^ N ^ M =l N, 
we can find a differential formula tpM.N in for each Af g Ci and N G C2 
such that Af N (pM,N but iV >^ ipM.N- Let V' be Aat Vm.n then Ci ip but 
C2 t= "iV"! contradiction. □ 

We call a class of models C L-compact, if for any set of L-formulas U: every 
finite subset of S is satisfiable in C implies that U itself is satisfiable in C. 
For example, any class of finitely many mutually L-nonequivalent models is in- 
compact.^ In the following wc always assume that L contains binary conjunction 
A with its normal semantics. We show that if we restrict to L-compact classes 
then and match =£ and exactly, given that ~ matches =l exactly. 
To obtain this result, we use the following lemma: 

Lemma 14 If\/M,N e M : M ^ N 4^ M =l N then for any L-compact 
C CM and N eM, (1) implies (2): 

1. for all if G L : C \= if ^ N ^ if. 

2. there is a model M E C such that M ^ N . 

^ If not, there is an infinite set S of i-formulas such that eacli finite subset of S 
is satisfiable, but S is not satisfiable as a whole. Then, for each equivalence class 
[M] of =L in C, pick a (I>[m] G ^ that does not hold on the models in [M]. Let 
A = {99[jv/]|Af £ C} C X", then A is finite but not satisfiable on C. Contradiction. 
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Proof. Suppose (1), and towards contradiction suppose there is no model in C 
such that M N. Let U = {ifi \ N \= tp}. Since VA/,iV e 7W : A/ ~ 4^ 
M =L N, S is not satisfiable in C, otherwise there is a model A/ e C such that 
M ^ N . Since C is L-compact, there is a finite subset Zi of 17 such that A is not 
satisfiable in C. Clearly, C C [M e M\M \^ f\ A}. From (1) we know A ^ 
contradictory to N 'f U. □ 

Theorem 15 Suppose \/M,N G M : M ~ iV <^ Af =l N. For L- compact 
classes Ci and C2 of A4 the following hold: 

1. Ci~^C2 <^ Ci =£ C2 

2. Ci~^C2 ^ C\ C2 

Proof. We only show the direction <;= in (2). The proof of (1) is similar but 
simpler. 

Suppose Ci and C2 are L-compact and Ci x^, C2. Now suppose towards 
contradiction that Ci^%C2. Then there are no models M e Ci and N G C2 such 
that M ^ N. We claim the following: 

for each N G C2 there is some tppf G L such that Ci N lySjy a-nd N ]^ ipff 

Suppose not. then there would be a model N G C2 such that for all (ys : Ci N (/jjv =^ 
N \= (fN. From Lemma 14 there is A/ G Ci such that A/ N, contradictory to 
the assumption. 

Let E be the collection of such formulas: {ipN \ N G C2}. Clearly, S is not 
satisfiable in C2, but Ci N E. Since C2 is i-compact, there is a finite subset Z\ 
of S which is not satisfiable in C2. It is easy to see that C2 ^ {A/ | A/ ]^ /\ Z\}. 
However, Ci N Therefore Ci 'jtL C2, contradiction. □ 

From the definition of L-compact classes, it is straightforward to see that: 



Proposition 16 Suppose L contains negation. If for every class C G M. there 



is an L-compact class C such that C =£ C , then L is compact. 



Proof. Given an arbitrary set of L-formulas E, if every finite subset of E is 
satisfiable in C then every finite subset of E is satisfiable in the compact C 
(otherwise there would be a finite A C E such that C -> /\ Z\ but C N -1 /\ Z\, 
which is a contradiction). Since C is compact, there is a model A/ G C such that 
M 'f E. Thus L is compact. □ 

Proposition 17 If L is compact, then L only defines L-compact classes. 

Proof. Suppose L is compact and defines the non-compact class C C by 
(f G L. Let be a witness to the non-L-compactness of C, i.e. every finite 
subset of E is satisfiable on C, but not E itself. Note that every finite subset of 
E' = E IJ {ip} is then satisfiable on C, and therefore on M. By compactness of 
L, E' is then satisfied by some M G M. But then M \= E and M G C hy M \^ ip. 
Contradiction. □ 
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Theorem 18 If L2 is a language extension of Li (Li C L2), then: 

1. An L2-compact class is also Li-compact. 

2. If Li and L2 are compact and contain -> then they have the same distin- 
guishing power iff they have the same expressive power. 

3. If Li and L2 have the same distinguishing power and contain -> then: Li 

L2 <^=> L2 defines some non-L2- compact class which can not be defined by Li. 

Proof. For (1): trivially by Li C L2- 

For (2), <^ is obvious; we need to show => . Suppose Li and L2 have the same 
distinguishing power. Then =Li==L2- Since L2 extends Li, we only need to show 
L2 =4e ^1- From Proposition 17 and the fact that Li and L2 are compact, we 
know that Li and L2 can only define Li- and i2-compact classes respectively. 
We only need to show that if L2 can define an L2-compact class C, then Li 
can also define it, i.e. for any L2-compact class C : C :^l2 C =^ C :^Li C. Now 
suppose for an L2-compact class C : C 'i^hi C. Since L2 contains negation, from 
Proposition 17 it is easy to see that C is also L2-compact. From statement (1), 
C and C are also Li-compact. From Theorem 15, we know that it is not the case 
that C{=l2)'e^-^ Since =Li==L2: it is not the case that C{=Li)%C. Again from 
Theorem 15, C^l^C. 

For (3), <^= is trivial. For =>, suppose towards contradiction that Li L2, 
but that for all classes C that are not L2-compact: if L2 can define C, then so 
can Li. Because Li -<g L2, then there must be an i2-compact class C which is 
definable by L2 but not definable by Li. From Proposition 17, C and C are both 
Li- and L2-compact. However, according to Theorem 15, with similar technique 
used in the proof of (2) we can show that C is then definable by Li, contradiction. 

□ 

Discussion Statements (2) and (3) of Theorem 18 are closely related to some 
well-known results. Recent results on Lindstrom-type theorems for fragments L 
of first-order logic are often formalized in the following form [13,4, 11]: 

A logic L' that extends L has equal expressive power as L iff: 
(a) L' is compact and (b) L' -formulas are invariant for some ^. 

It follows from statement (2) that for compact logics, in order to obtain such 
theorem from right to left, we only need to show that the extended logic L' 
has the same distinguishing power as L, which in principle is weaker. This gives 
an alternative perspective on the classical model theoretic arguments in [8,6], 
that use compactness for proving characterization results. Condition (b) helps 
to limit the distinguishing power with the presence of (a) but with some hurdles 
to overcome, cf. the discussions in [11]. 

Statement (3) gives us a hint on how to show that two equally distinguish- 
ing logics have different expressive power. This task is often considered hard. 
However, due to statement (3), we only need to concentrate on non-L-compact 

cf. Def.lO, replace ~ by =^2- 
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classes. This could explain the complicated constructions in many works on ex- 
pressivity of temporal logic. For example, in [3], it is shown that if a CTL* 
formula does not correspond to a CTL formula then it must have an infinite 
number of mutually nonequivalent finite models. Now this is just a straightfor- 
ward consequence of our general result. 

4 Application: Class Bisimulation and Modal Logic 

In this section, we focus on class bisimulation t?^, the lifted notion of bisimula- 
tion ti. We will demonstrate that such particular structural relations on classes 
can be studied in a similar way as the equivalence relations on models. As we will 
see in the following, most of the definitions and results about bisimulation and 
modal logic can be adapted to the corresponding ones for class bisimulation. As 
an example, we show a class bisimulation characterization of modal definability 
similar to the previous result in [14]. 

4.1 Standard Bisimulation 

We first recall some standard results of bisimulation and modal logic, which we 
will use intensively in the next subsection. Let M and N be two Kripke models 
with set of states S and T. A binary (symmetric) relation R C 5 x T is a 
bisimulation relation if sRt implies: 

1. V{s) = V{t) 

2. if s s' in M then there is a t' such that t t' in N and s'Rt'; 

3. if t ^ t' in M then there is a s' such that s s' in N and t'Rs'. 

For two pointed models M, s and N, t, we say A/, s is bisimilar to N, t (A/, s 
N,t) if there is a bisimulation R between M and N and {s,t) G R. Note that 
in this section we will only talk about pointed Kripke models. We may also call 
them pointed models or simply models for short. 

We call a pointed Kripke model M, s modally-saturated or simply m-saturated 
if for any state w € M and any set of ML formula U: if every finite subset of 2J 
is satisfiable at the successors of w then E is satisfiable at some successor of w. 
We say a class of models A4 for a logic L has the Hennessy-Milner property for 
ML if for all models M,s,N,t £ M: 

M, s =ML N,t => M,s t± N,t. 

Here we list some standard results cf. [1]. First, bisimulation is an invariance 
for ML: 

Theorem 19 // pointed Kripke models M, s N,t then M, s =ml N, t. 
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Let uz{M),Trs be the pointed ultrafilter extension^ of a model A/, s, with the 
principal ultrafilter tt^ generated by s as its designated point. We know that: 

Theorem 20 For any pointed model M, s : M, s =ml ue(A/), tTs and ue(M), tt^ 
is m-saturated. 

The above Theorem implies the following bisimulation-somewhere-else result: 

Theorem 21 For pointed models: M, s =ml N,t ue(M), tts tl uz{N),7Tt. 

Let C™ be the class of m-saturatcd pointed Kripke models. Bisimulation coin- 
cides with the induced equivalence relation of ML on C" : 

Theorem 22 C™ enjoys Hennessy-Milner property for ML. Thus for any M, s, 
N, t eC" : M,s N,t ^ M, s=mlN, t. 

The last standard result we want to mention here is that bisimulation coincides 
with induced equivalence relation of ML^o {ML with conjunction over any set): 

Theorem 23 M,s N,t M, s =ml^ N, t 

Moreover, we can actually show that the class of m-saturated models is the 
biggest class which contains C™ and satisfies Hennessy-Milner property for ML. 

Theorem 24 For any class of pointed models (generated by the designated points) 
C D C"', there exist models M, s,N,t & C such that M, s =ml N, t but Af , s ^ 
N,t. 

Proof. The proof makes use of the next lemma, Lemma 25. Sec Appendix C. □ 

Lemma 25 // A/, ,s N,t and t is m-saturated, then A/, s is m-saturated 
too. 

Proof. See Appendix D. □ 
4.2 Class Bisimulation 

In this section, we prove the analogies of the results in the previous section w.r.t 
class bisimulation Corresponding results w.r.t t:?^ can be also proved with 
little adaptation. 

From Theorem 12 and Theorem 19, we know that tl^ is the class invariance 
for ML, namely for any classes of models Ci and C2: 

However the converse is not true even when we restrict to m-saturated mod- 
els. According to Theorem 15, such counterexample must involve non-compact 
classes. For example, let Ci = {Afi, A/2, • • • } be the set of all the finite walks 
while C2 = {A/o} where A/q is a single point with self- loop. 

^ An ultrafilter extension of a Kripke model M = {W, R, V) is again a Kripke model 
where the set of worlds is the set of ultrafilters over W; two ultrafilters u and i; 
are linked by a relation iS X £ v implies the set of points which sees X through a 
relation in M is in u. The valuation of proposition letter p at u is true iff V{p) G u. 
For the formal definition of ultrafilter extension cf. [1]. 



11 



Example 26 Ci^^C2 but Ci :<mlC2 



Ci C2 

Note that Mq is not bisimilar to any of the models in Ci. However we can 
show that Ci C2. Suppose not, then there is a formula (p £ L such that 
Ci N -^ip and C2 N ip. Since tp is satisfiable at the tree unraveling of Mq, it must 
be satisfiable at a finite submodel of it due to the finite depth property of ML. 
However, any finite submodel of the unraveling of AIq is just a finite walk. Thus 
there is a fc such that Mk N (p. Therefore Ci -^cp. Contradiction. 

Like in the case of standard bisimulation, we want to identify the collections 
of model classes where class bisimulation coincides with the class equivalence 
relation of modal logic. Thus we need to lift the notion of m-saturated models. 

Definition 27 (Modally-saturated class) A class C of pointed Kripke mod- 
els is m-saturated if each model in C is m-saturated and C is ML-compact. 

The following is a corollary of Theorem 22 and Theorem 15: 

Theorem 28 If Ci and C2 are m-saturated then Citl^C2 ^ Ci C2.. 

The class-bisimulation- somewhere- else result corresponding to Theorem 21 
requires the following generalization of ultrafilter extensions which aims to make 
a class m-saturated. 

Definition 29 (Ultrafilter extension of classes) Given a class C of pointed 
models, let Sc he the set of designated points of the models in C. We define 
the ultrafilter extension of a class C (written ue(C)) as a new class of models as 
follows: 

ue(C) {ue(|+)C),u \ u e Uc} 

where Uc ^ {u \ u £ ue(l+jC) and \/X £ u : X Cl Sc ^ 0}, and 1+jC the disjoint 
union of models in C (as unpointed models). Then ue({Ajf, s}) = {ue(A/), tTs}. 

Note that our purpose is to make a class m-saturated by a operation on class of 
models, like ultrafilter extension does on single model. This means we need to 
include many auxiliary models to make the class ML-compact. It is not hard to 
see that the pointed models in ue(C) are defined differently than the Ultraunions 
in [14], where ue([+JC),M is called an ultraunion oi C iS u £ Uc = {u \ u G 
ue((+JC) and u contains all the cofinite subsets of Sc}. First of all. Uq does not 
contain principal ultrafilters generated by s £ Sc- Moreover, when we restrict 
ourselves to non-principal ultrafilters of 1+JC, Uq is still a subset of Uc. To see 
this we can prove: 
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Proposition 30 If Sq is infinite, U'q C Uc\np where 

Uc\np = {u \ u ^ Uc and Hs for any s G Sc}- 
Moreover i/l+J C\S'c is infinite, then U'q C Uc\np- 

Proof. Sec Appendix B. □ 
Now we want to show an analogy of Theorem 21: 

Theorem 31 (Class Bisimulation somewhere else) For all classes of pointed 
Kripke models Ci and C2: Ci xml C2 <^ ue(Ci)tl£;Ue(C2). 

To prove this theorem, we need Theorem 28 and the following two lemmas. 
Lemma 32 For any class of pointed Kripke models C, any if G ML : 

C N 4^ ue(C) N ip 

Proof. <=^: Note that for all s G Sc- ue(l+JC),7rs G ue(C) where tTs is the principal 
ultrafilter generated by s. Assume ue(C) N tp then for all s & Sc- ue(l+)C),7rs N ip. 
Thus from Theorem 20 and the preservation result for disjoint union, C \= ip. 

=^: Suppose C \= ip, then Sc Q Vj+jc(v) where Vj+jc(v) = | l+J C, N ip}. 
Now we need to show that for all u G Uc- ue(l+jC),u N ip. Since ue(l+jC) is the 
ultrafilter extension of 1+JC, it amounts to prove for every u £ Uc- 

Suppose not, then Vyc(</') £ due to the fact that u is an ultrafilter. Since 
Sc ^ ^\+)c{v)i M±)c(v) l^'S'c = 9, in contradiction to the assumption that u G Uc. 

a 

Lemma 33 For any class C of pointed Kripke models, ue(C) is m-saturated. 

Proof. Since all the models in ue(C) are ultrafilter extensions thus m-saturated, 
we only need to show that ue(C) is ML-compact. Given a class C of pointed 
Kripke models, suppose every finite subset of E is satisfiable in ue(C). We claim 
that: 

every finite subset of S is satisfiable in {|+JC, s | s G Sc} 

Suppose not, then there is a finite A <Z S such that A is not satisfiable in 
{[+)C,s I s G Sc}- Thus for any s G S'c : 1+J C, s N -. /\ Z\. Therefore from the 
preservation property of the disjoint union, for any pointed model M, s G C : 
M, s N A ^ and then C 1= -. /\ Z\. From Lemma 32, ue(C) N -. A ^ contradictory 
to the assumption that every finite subset of S is satisfiable in ue(C). 
Now let 

Fc{S) = {V^ci^) I ^ is a finite subset of S} 

where Vy^^ = {s | s G and 1+jC, s N A}. It is not hard to see that Fc{S) has 
the finite intersection property since: 
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1. for any finite subsets A and A' oi S : V^^{A) n V{^^{A') = Vj^^(zi U A') 

2. Vy(^(Zi U A') ^ according to the above claim. 

From Ultrafilter Theorem cf. [1], Fc{S) can be extended to an ultrafilter u* . Now 
for any <E S , clearly Vi+jc(i^) G u* since V^(,{ip) C Vi+|c(i^) and V^(,{(p) E u* . 
Thus from the construction of ultrafilter extension, ue(l+JC),u* N ^p. Therefore 
ue(l+JC),u* N S. 

We now only need to prove that u* E Uc, namely for ail X £ u* : X CiSc 
Suppose not, then there is an X such that X n 5c = 0. However, since Fc{S) C 
Sc, there is an F G u* : X n y = 0. Then u* is not an ultrafilter, contradiction. 

□ 

The previous two lemmas complete the proof for Theorem 31. 
As a corollary of Theorem 31 we can give a class-bisimulation characterization 
of the modally-definablc classes: 

Corollary 34 A class of pointed modelC is not definable in ML iff ut{C)tl%\xt{C) . 

Proof. Follows from Theorem 31. Note that C is not definable by a single ML 
formula iff C '^^ml C. □ 

It follows that: 

Corollary 35 A class of pointed Kripke model C is definable in ML iff C and C 
are closed under bisimulation and ue (namely ue(C) CC). 

Proof. =^ is straightforward. We now prove <^=. Note that from Corollary 34, we 
only need to show 

C and C are closed under bisimulation and ue implies ue(C)'^^ue(C) 

Suppose ue(C)t:^^ue(C), namely there are M,s G ue(C) and N,t £ ue(C) such 
that M, s N,t. Now suppose C and C are closed under ue, then M, s e C and 
N,t £ C. Since M, s N,t then C is not closed under bisimulation. □ 

We have to be careful if we want to obtain the analogy of Theorem 23. 
A natural question to ask is whether we can get rid of class-size conjunction 
and disjunctions in Theorem 13, but only use ML^o that is the modal logic 
with conjunctions over arbitrarily large sets. Unfortunately, we observe that the 
following is not true: 

Cl -ML^ C2 ^ Ci t^f C2 (X) 

Consider an example from [8] (where it is used to show that MLoq can not 
define well-foundedness). For each ordinal a, let = {{(i \ P < ct},R} be its 
reverse, i.e. R = \ P' < (3 < a}. Let be the modification of Ma with 

R replaced by R' = RU {{a,a)}. Now let Ci be the class of reserved ordinals 
Ma and C2 be the class of modified reversed ordinals . It is not hard to see 
that none of the two models in these two classes are bisimilar to each other. 
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However, from [8] we know that there is no ML^o formula to separate Ci from 
C2, namely Ci '^^ml^ C2. Thus X docs not hold. 

As an analogy of Theorem 24 about Hennessy-Milner property, we can actu- 
ally show that m-saturated classes constitute the core of the maximal collection 
/C of model classes which has the following property: 

VCi, C2 e /C : Ci t^f C2 ^ Ci XML C2 (®) 

Let K,™ be the collection of model classes which extend some m-saturated classes 
by possibly adding mo dally- equivalent m-saturated models. Given a model class 
C, let C\m be the class of m-saturated models in C. Formally, 

^™ = {C I C\r,i is m-saturated and VM e C3M' G C|„, : M =ml M'} 

We now prove the following theorem: 

Theorem 36 /C™ is the largest collection of model classes that contains IC^^ and 
satisfies (®). 

Proof. See Appendix E. □ 
5 Conclusion and Future Work 

In this paper, we studied the expressive power as class-distinguishing power in 
depth. We lifted the notion of invariance to classes of models aiming to capture 
the expressive power of logics. On compact classes, the lifted notions of class 
invariance captures the expressive power precisely. In particular, we focused on 
the notion of class bisimulation and demonstrated the application of our results 
by revisiting modal-definability with our new insights which may shorten the 
proof. It makes clear that compactness of classes of models plays an important 
role in obtaining precise structural characterizations of expressive power. If two 
logics satisfy the compactness property, their comparison in terms of distinguish- 
ing power conincides with their comparison in terms of expressive power. This 
helps to obtain characterization of compact logics in terms of Lindstrom-type 
theorems. However, compactness fails on non-elementary extension of FOL (e.g. 
modal /z-calculus) or fragments of FOL restricted on finite models. We may 
look for different classes of models with different lifting method for such case to 
characterize the expressive power. 
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Appendix 



A Proof of Theorem 1 

Proof. (1 =i> 2) Suppose L2 is at least as elass-distinguishing as Li, and let C 
be a class of models definable by ipi G Li. Then C ~ {M G | A/ N (^1} 
and its complement C = {M G M- \ M \/ ipi}. Since (pi separates C and its 
complement, it follows from the assumption that there exists a separating 
formula (p2 G ^2 for C and its complement. But then either C = {AI E A4 \ 
AI \= (P2} and C = {M E A4 \ M LP2} ot vice versa. In any case C is 
definable in L2. 

(2 => 1) Suppose L2 is at least as expressive as Li, and let Ci, C2 be classes of 
models in A4. Suppose there exists a separating formula tpi E Li for Ci and 
C2 such that Ci C {Af | Af N (pi} and C2 C {Af | A// (^1}. Since L2 is at 
least as expressive, there is a formula (p2 in L2 such that 

{A/ G I A/ N (^1} = {M eM \ M N (^2}- 

But then obviously ip2 is a separating formula for Ci and C2 in i2- 

□ 

B Proof of Proposition 30 

Proof. First note that for any m G [/c, if w is not a principal ultrafilter generated 
by some s E Sc then it is not a principal ultrafilter. Suppose not, then u is 
generated by a s' ^ Sc. Since {s'} Ci Sc = 9, u ^ Uc, contradiction. Now we 
know that Uc\np only contains non-principal ultrafilters. Since Sc is infinite, for 
any co-finite subset X ofl+jC: X D Sc 7^0. Thus we have: 

Uc\np = {u \ u contains all co-finite subsets of (+)C and E u : X f] Sc ^ ^ } 

Suppose u E U'q. According to the definition, u contains all cofinite subsets of 
Sc ■ Now we show u G ?7c by checking whether all co- finite subsets of 1+J C are in 
u. Take a co-finite subset X of y C It is not hard to see that X n 5c is co-finite 
in Sc. Thus X n Sc & u, then by closure property of ultrafilter u, X E u. 
If l+l C\Sc is infinite, then it is easy to see that u* E Uc where 

u* = {X I X is a co-finite subset of |+JC} 

however, u* ^ Uq since it does not contain any co-finite subset of 5c. □ 

C Proof of Theorem 24 

Proof. Suppose towards contradiction that there is a class of pointed Kripke 
models C D such that C enjoys Hennessy-Milner property. Then there is a 
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pointed model (A/, s generated by s) in C such that M, s is not m-saturated. Now 
we consider the uhrafiher extension of pointed model M : ue(M) (call the gener- 
ated model N, t). From Theorem 20, M, s =ml t and N, t is m-saturated, thus 
N,t G C. Since C has Hennessy-Milner property, M, s N,t. From Lemma 25, 
M, s is m-saturated, contradiction. □ 

D Proof of Lemma 25 

Proof. Suppose A/, s N,t and N, t is m-saturated. Towards contradiction 
suppose that pointed model Af, s is not m-saturated. Then there is a point s' 
such that there is a set of ML formulas E for which each finite subset is satisfiable 
at successors of s', but S itself is not satisfiable at any successor of s' . Let t' be 
the bisimilar point of s' in A^. We claim 

every finite subset of S is satisfiable at the successors of N^t' . 

To prove the claim, observe that for any finite subset Z\ of Z", O /\ Z\ is satisfiable 
at s' . Since A/, s' t± N,t' thus 0/\Z\ is satisfiable at t' , meaning that there is 
a successor of t' such that t' satisfies A. Therefore, every finite subset of E is 
satisfiable at the successors of t' . 

Now based on the claim, and the fact that N, t is m-saturated, we have that 
E is satisfiable at some successor r oi t'. However, there can not be a bisimilar 
successor of s' in Af to r in N, otherwise E is satisfiable in a successor of s'. 
Thus M, s' N,t', contradiction. □ 

E Proof of Theorem 36 

Proof. Suppose towards contradiction that there is a class K.' 3 /C™ such that 
(®) holds for ML. Then according to the definition of A^™, there is a class C € K,' 
such that either C\m is not m-saturated or there is a model M, s G C that is not 
equivalent to any m-saturated model in C. 

For the first case, there is a set of formulas E such that it is not satisfiable 
in C\m but each finite subset of E is. Now consider the ue(C). It is easy to see 
that E is satisfiable in ue(C). Thus there is a m-saturated model Af, s in ue(C) 
such that M, s \= E. We now take the class C = {M, s}, it is clear that C £ K,' 
since it is m-saturated. Then for any (j) ^ E, C -^(j) since </> must be satisfiable 
somewhere in C. Thus it is not hard to verify that C ^ml C . Now according to 
our assumption that /C' has property (®) for ML, we know that there is a model 
N,t in C which is bisimilar to M, s. However, then N,t \= E, contradiction. 

For the latter case, since Af, s is not m-saturated and we know there is no 
modally equivalent m-saturated model of Af, s in C, thus ue(Af ), tTs ^ C. Now we 
consider C and C' = {ue(Af ), tTs}. It is easy to see that C ^^ml C . However, there 
is no model N,t\nC such that N,t ue(Af),7rs, since otherwise according to 
Lemma 25 and Theorem 20, N, t is m-saturated too and N, t =ml M, s. □ 
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